Security Advisory

CVE-2006-6637

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-12-19 20:00:00
Last updated 2024-08-07 20:33:59
Assigner mitre
State PUBLISHED

Description

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."